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We discuss three applications of efficient quantum algorithms to determining properties of permu- 
tations and group automorphisms. The first uses the Bernstein- Vazirani algorithm to determine an 
unknown homomorphism from to Aut{Zp) where p is prime. The remaining two make use of 

modifications of the Grover search algorithm. The first finds the fixed point of a permutation or an 
automorphism (assuming it has only one besides the identity). It can be generalized to find cycles 
of a specified size for permutations or orbits of a specified size for automorphisms. The second finds 
which of a set of permutations or automorphisms maps one particular element of a set or group 
onto another. This has relevance to the conjugacy problem for groups. We show how two of these 
algorithms can be implemented via programmable quantum processors. This approach open new 
perspectives in quantum information processing when both the data and the programs are repre- 
sented by states of quantum registers. In particular, quantum programs that specify control over 
data can be treated using methods of quantum information theory. 

PACS numbers: 03.67.Lx 
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I. INTRODUCTION 

Group theory has proven to be a useful arena in which 
to explore the application of quantum algorithms, that 
is implementation of fundamental concepts of quantum 
theory for design of efficient algorithms. Perhaps the 
most prominent example of this is the algorithm for the 
hidden subgroup problem P, [2, d, 13, Hi • In this problem, 
we are given a black box that evaluates a function, /. 
The function maps a finite group G to some finite set X . 
The function / separates [6jj cosets Q of some subgroup 
K of G. That is, / is constant on the left cosets of some 
subgroup, K oi G and distinct for different cosets. The 
object is to use the black box (the function f) to deter- 
mine a generating set for the subgroup K. This prob- 
lem can be solved efficiently for Abelian groups by using 
a quantum algorithm. Specifically, Shor's algorithm for 
factoring is one particular example of this quantum algo- 
rithm. A quest for efficient quantum algorithms for the 
hidden subgroup problem for arbitrary groups would re- 
sult in efficient quantum algorithms for problems such as 
the graph isomorphism problem and the shortest vector 
problem in lattices. Recently, progress has been made 
for certain non-Abelian groups, one example being the 
dihedral group H, i, [H . 



A. Quantum algorithms 

Here we wish to show that quantum algorithms can 
be applied to the study of permutations and group au- 
tomorphisms. If S is a finite set, a permutation, cr is a 
bijection mapping S into itself. A group automorphism 
is a permutation on a group that satisfies certain condi- 
tions. In particular, an automorphism, a : G — > G of a 
group, G, is a bijection of the group back into itself so 



that the group operation is preserved, i.e. if 51,52 G G, 
then a{gig2) = a{gi)a{g2)- The set of automorphisms of 
a group, G, is itself a group, denoted by Aut{G), with the 
group operation being function composition. If the order 
of the group, G, is N, then the automorphism group of 
G is a subgroup of the symmetric group on objects, 
that is the group formed by permutations of N objects. 

(1) Our first algorithm solves the following problem 
by making use of a variant of the Bernstein- Vazirani al- 
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|12| |. Consider the cyclic group Zp, where p 
. The automorphism group of Zp is isomor- 



phic to Zp-i We consider a function / 

Aut(Zp). In particular, we have that 



/ : (ni,n2. 
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(1) 



where Uk S -^p-i and aj^ G Aut{Zp). We have a circuit 
whose inputs are an element of Z^^, n = (ni, 712, . . . nm), 
and an element, I E Zp, and whose output is an element 
of Zp given by a{l), where a = f{ri). Our task is to 
determine the automorphisms {(Xj^ \ k = 1,2,... m} with 
as few uses of the circuit as possible. 

The other two algorithms are both variants of the 
Grover search algorithm (15j . 

(2) The first finds fixed points of permutations or auto- 
morphisms. Suppose the permutation a on S has only 
one fixed point, that is, there is only one element s G S 
such that ct(s) — s. The object is to find the fixed point 
evaluating the permutation as few times as possible. This 
can clearly be used to find fixed points of automorphsims 
as well. By applying the same procedure to cr" we can 
also find elements of S satisfying ct"(s) = s. Permuta- 
tions can be written as the product of disjoint cycles. By 
searching for points satisfying (t"'(s) = s, we are effec- 
tively searching for cycles of length n. Therefore, this al- 
gorithm can be used to find cycles of a specified length in 
a permutation. For an automorphism, this corresponds 
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to finding an orbit of a particular length. 

(3) The final algorithm searches among permuta- 
tions to find one with a specific property. In partic- 
ular, suppose we have a set of permutations ak where 
k = 1,2, . . . M. Let si and S2 be two spccfied elements 
of S, and suppose that only one of the permutations sat- 
ifies the condition ak{si) — S2- We want to find which 
one making use of as few function evaluations as possible. 
The corresponding problem for automorphisms is related 
to the conjugacy problem. For a group G, gi and 52 in G 
are said to be conjugate if there is an element of G such 
that gi = .9o52ffcr^- The mapping agg{g) = goggo^ is an 
automorphism (automorphisms of this type are known as 
inner automorphisms). The conjugacy problem is, given 
two elements of a group, to determine whether they are 
conjugate to each other. The algorithm we are proposing 
can be applied to this problem. 

Two of the algorithms we suggest are implemented 
by programmable quantum processors. A programmable 
quantum processor is a device that can perform several 
different functions on a quantum input state, which we 
shall call the data. The operation that is performed on 
the data is determined by a program, which is itself a 
quantum state. The advantage of such a device is that it 
is not necessary to construct a new quantum circuit for 
each operation, but only to change the program. 



B. Programmable quantum processors 

Programmable quantum processors have been the ob- 
ject of a number of recent studies. Nielsen and Chuang 
showed that the number of unitary operations such a 
device can deterministically perform is limited by the di- 
mension of of the program space This led to the 
consideration of probabilistic [H, H Ei and 
approximate processors [O, llSl. Il9l. A probabilistic 
processor succeeds only part of the time, but we know 
when it does and when it does not. An approximate pro- 
cessor performs a set of operations to some specified level 
of approximation. Probabilistic and approximate proces- 
sors do not suffer from the same limitations as determin- 
istic ones do, and can perform larger sets of operations 
for a given program space dimension. 

Another class of programmable devices consists of pro- 
grammable measurement devices. These perform a mea- 
surement on an input state, with the measurement being 
specified by a program state. The first programmable 
measurement device was proposed by Dusek and Buzek 
[2^, and since then a number of different types of these 
devices have been studied [H, [H, IH, [13, Hi ill . 

One question that can be raised is whether having 
quantum programs gives one any advantage over sim- 
ply having classical ones. A classically programmable 
quantum device can simply be thought of as one with a 
dial, with different settings of the dial leading to different 
quantum operations being applied to the input quantum 
state. There are several reasons that quantum programs 



can be advantageous. First, the program itself may be 
the result of a previous quantum computation. This al- 
lows programmable quantum processors to be chained 
together, with the output of one serving as the program 
of the next. A second reason is that the program may be 
intrinsically quantum. As an example of this, consider 
the programmable measurement device discussed in psj . 
There the program consists of two qubits, one in the state 
IV'i) and the other in the state \i{j2), both of which are 
unknown. The data consists of a qubit that is guaranteed 
to be in either \Tpi) or IV'2), and our task is to determine 
which. Here, the program, consisting of two qubits, is 
intrinsically quantum; we are comparing our unknown 
qubit to a two-qubit string in order to determine which 
one it matches. Finally, a third reason is that if the pro- 
grams are quantum, we can apply quantum information 
processing methods to the programs as well as the data. 
This is what we shall study here with two examples. 



II. MODIFIED BERNSTEIN- VAZIRANI 
ALGORITHM 

Before proceeding to the modified version of the 
Bernstein- Vazirani algorithm that solves the problem dis- 
cussed in the Introduction, let us review what the orig- 
inal algorithm does. One is given a black box that 
evaluates a Boolean function, f{x), whose argument, 
X = x„_i . . . a;ia;oi is an n-digit binary number, and 
Xj = 0,1 for < j < n — 1. The function is of the 



form 



n-l 
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b — X ■ y + b. 



(2) 



where y is a fixed, and unknown, n digit binary number, 
b — or 1, and all additions and multiplications are 
modulo 2. The objective is to find y. Classically this 
requires n + I function evaluations. One first finds b by 
evaluating the function for x = 0, and then one finds yj 
by choosing x to be the string with Xj — 1 and all of the 
other digits equal to 0. Quantum mechanically only one 
function evaluation is required. 

In the version of the algorithm considered here, the 
function is a mapping from Z'^_-^ to Aut{Zp) rather than 
one from to Z2- As was stated in the introduction, 
the automorphism group of Zp, where p is prime, is iso- 
morphic to Zp^i. This can be seen as follows. Each of 
the automorphism is completely determined by its action 
on 1, so let us denote by ak the automorphism that sat- 
isfies afc(l) = k. Note that ak{n) ~ nk modfc. There are 
clearly p — 1 such automorphisms, and any of the ak for 
which k does not divide p — 1 is a generator of the group 
Aut{Zp). 

We now have the function / : Z^ij Aut{Zp) spec- 
ified by Eq. ([1]). This function can be implemented by 
a quantum circuit (see Fig. 1). It consists of gates that 
are controUed-unitary gates. The control line has inputs 
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from Zy^\. The target line has inputs taken from Zp. 
Elements of both of these groups are encoded as vectors 
from orthonormal bases. The action of the controUed- 
unitary gate is given by (n e Zp-\ and I G Zp) 



\n)\l)^\n)\am), 



(3) 



for some a^- We have p — 1 different kinds of controUed- 
unitary gates, one for each automorphism in Aut{Zp). 
The circuit is composed of m of these gates. Conse- 
quently, there are m control lines, one for each of the 
inputs from Z^_-^^. All of the unitary operators act on a 
common target line. The first gate corresponds to aj^ , 
the second to a^^, etc. The inputs to the circuit are 
\n) = \n\) . . . \nm) corresponding to an element of Z^_-^ 
and \l) corresponding to an element of Zp. We shall de- 
note the span of the vectors |n) by Tip, the program 
space, and the span of the vectors \l) by TLd, the data 
space. The action of the circuit is 



|n)|0-|n)|a(0), 



(4) 



where a = f(n). 



M-1 



data ■ 



FIG. 1: The quantum circuit for the modified Berstein- 

Vazirani algorithm. Each control line is a qudit, whore 
d = p — 1, that is connected to a gate that implements a 
unitary operation on the data. The data space is spanned by 
the basis {\l)\l = 1,2, . . .p — 1}, where each basis state en- 
codes a member of Zp. If the fc"^ control line is in the state 
|n) the operation fj^ is performed, where Uj^ corresponds to 
the automorphism aj^.. We have that Uj^ \l) = 



For each of the automorphisms, ak, define the vector 
in Hd 



n'=0 



If f/fe is the operator whose action is given by Uk\l) 
\ak{l)), then we have that 



(6) 



We now choose one of the automorphisms, say a^j,, that 
is a generator of Aut{Zp), i.e. any member of Aut{Zp) 



can be expressed as a power of aj^, , and construct the 
vector |ujo). This vector is a simultaneous eigenvector of 
all of the operators Uk- In particular, if aj = a^^, then 



(7) 



Therefore, there is a one-to-one correspondence between 
automorphisms and eigenvalues of \ujg). 

We take the input state to the quantum circuit to be 



(p - 1)W2 



E I") ^ l"^o>- (8) 



The output state is then 



|*out) = 



(p - l)'»/2 



(9) 

where yk is the unique integer between and p — 1 such 
that 



Jk Jo 



(10) 



We now note the following useful fact. Defining the vec- 
tors 



\Vr) 



^— y 

\)m/2 



„2^ir.n/(p-l)|^^^ (11) 



where r e Z'^_-^ and r ■ n = rin\ + . . .rmnm, we have 
that 



{Vg\Vr) 



(12) 



Therefore, by measuring the output of the control lines 
in the basis \uf), we can determine y. This member of 
Z^i completely specifies the function /, i.e. we know 
which automorphism is performed by each control line in 
the circuit. 

One use of the quantum circuit has allowed us to deter- 
mine the unknown function /. Classically, m uses would 
be required. One would always send 1 into the target 
input, and 1 into one of the control inputs and into the 
others. This would allow one to determine the automor- 
phism corresponding to the control input into which 1 
had been sent. Repeating this operation for each control 
line (m times) would allow one to determine /. 

Finally, let us note that this algorithm solves a particu- 
lar kind of hidden subgroup problem, which is rather dif- 
ferent from the usual one. The mapping / is a homomor- 
phism from Z^^ to Aut{Zp), and so its kernel is a sub- 
group of ^^1, and its image is a subgroup of Aut{Zp). 
One can view the algorithm we have just presented as 
solving the problem of finding cither the kernel or the 
image of the unknown homomorphism, /. For example, 
suppose we wish to find the kernel. Once we have found 
y with one use of the quantum circuit, the kernel is given 
by the elements of Z^_-^ satisfying y • n = mod(p — 1). 
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III. FINDING FIXED POINTS 

Let us now consider the following problem. We are 
given a black box that implements an unknown permu- 
tation on a finite set, S, i.e. a : S ^ S. We would 
like to find the fixed points of the permutation, that is 
those elements s G S such that cr(s) = s. An algorithm 
that solves this problem could also be used to find cycles. 
Any permutation can be written as the product of dis- 
joint cycles. If we know that a permutation, cr, has one 
cycle of n and has no cycles whose size divides n, then 
we can find the cycle by applying the algorithm to ct", 
because the elements of the cycle are fixed points of cr". 
Group automorphisms are special kinds of permutations, 
so they too can be decomposed into disjoint cylces. In 
that case the cycles are known as orbits. Clearly an al- 
gorithm that solves the problem of finding fixed points 
of permutations, would also be capable of finding orbits 
of automorphisms. 

Consider now a set S and an permutation a of that 
set that has only one fixed point, sq. We shall show how 
we can use a modified Grover algorithm to find the fixed 
point. The elements of the set are encoded into an or- 
thonormal basis of a Hilbert space, Hs whose dimension 
is equal to the number of elements in the set, N. We 
shall be operating in the space Ha Tib where both Tia 
and Hb are copies of Hs ■ Define the state 

I«)a6 = ^^|s)a®|s)f„ (13) 

and the operator Ua\s) — |o'(s)). We begin the iteration 
that amplifies the amplitude of the state \so) by preparing 
the state 

\'ftn)ab = {Ua®Ib)\v)ab- (14) 

We now need an operator that will perform the am- 
plification of the desired state. This operator consists 
of two parts, one part flips the sign of the target state 
and this is followed by what Grover called the "inversion 
about the mean" . The operator that performs the sign 
flip is Uid = lab ~ "iPid, where 

P.d = Y.i\')^M)®{\Ms\). (15) 

sGS 

Clearly, Uid\si)a\s2)b = \si)a\s2)b if si ^ S2, and 
Uid\s)a\s)b = —\s)a\s)b- The second operator is given 
by 

Uu, - (U^ ® h){Iab - 2\v)ab{v\)(U-^ ® h). (16) 

Note that in order to implement this operator, we need 
black boxes that implement both Ua and U~^. 

We now apply —UwUid to |*I'i,i)a6 0{^/N) times. This 
has the effect of bringing the amplitude of the state 
I So) a I So) h close to one and suppressing the amplitudes 
of all of the other states, so that if the state is measured 



in the basis {|si)a ® |s2)&|si,S2 G S} the probability to 
find I So) a I So) & is close to one. We shall not prove this 
statement here, because the argument is standard (see 
Ref. ^3^), and we shall present a more detailed discus- 
sion of the Grover algorithm in the next section. It is 
useful, however, to see the effect of one application of 
— UwUid- We have that 




Note that the effect has been to increase the amplitude of 
150)0150)6 and decrease the amplitude of all of the other 
states in the superposition. 

If one does not know the number of fixed points, quan- 
tum counting can be used to find it jsT], (sl] . This proce- 
dure uses phase estimation to find the eigenvalues of the 
operator that implements the Grover iteration, and this 
allows one to determine the number of solutions, which 
in this case is the number of fixed points. 



IV. DETERMINING WHETHER TWO 
ELEMENTS ARE AUTOMORPHIC IMAGES 

Let X — {k\k = 0, ... iV — 1} and suppose we have 
a set of permutations on X, S = {<^j\j — 1, . . . M}. In 
addition, if xo,?/o S ^ are specified elements of X, we 
shall assume that only one of the permutations aj satis- 
fies the condition (7j(a;o) = yo- Our object is to find this 
permutation. 

There are a number of problems for which the problem 
stated above forms a template. We are interested in the 
case in which the elements of the set X are elements of a 
group, and the permutations represent the actions of au- 
tomorphisms, and 5* is a subgroup of the automorphism 
group of the original group. The object is then to find the 
automorphism for which one specified group clement is 
the automorphic image of another specified element. The 
problem can be modified so that we ask whether or not 
there is an automorphism in the set S so that one speci- 
fied group element is the automorphic image of another. 
The automorphisms may or may not be inner. An inner 
automorphism, a, is of the form a{g) = hgh^^, where 
g is an arbitrary element of the group G and h is fixed 
element of G. If they are, we are trying to determine 
whether group elements are conjugate to each other. If 
S is the subgroup of the automorphism group consisting 
of the inner automorphisms, then we are trying to deter- 
mine whether two specified group elements are conjugate 
to each other, i.e. whether they are in the same conjugacy 
class. This is known as the conjugacy problem. 

Another group theoretic problem which serves as a mo- 
tivation to look at the above search problem for permuta- 
tions is the Whitehead problem. In that problem, one is 
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trying to determine whether two elements of a free group 
are automorphic images of each other [33|. A general- 
ized form of the Whitehead problem considers n-tuples. 
In particular, given two n-tuples consising of elements 
of the free group, (51, (?2, • ■ • 5n) and {hi, /i2, . . . /in), does 
there exist an automorphism of the group, a, such that 
a{gj) = hj for j = 1, . . . n? A further variant is to restrict 
the set of automorphisms one is considering. In that case 
one would be interested in determining whether there is 
an automorphism in the allowed set that maps one spec- 
ified n-tuple to a second specified one. 

Classically, the only way to find the desired permuta- 
tion is simply to try them one by one to see which one 
gives the result crj{xo) = yo- This would typically take of 
the order of Af steps. What we want to show here is that 
by an application of a modified form of Grover's algo- 
rithm, we can, on a quantum computer, find the desired 
permutation in a number of steps that is of the order of 

We suppose that we have a quantum processor that 
causes the unitary operator V to be applied to the state 
vector 1 5'). The Hilbert space is a product of two others, 
H ~ Hs ® Ti-x, where is spanned by the orthonor- 
mal basis {|j)s|j = 1, . . . M}, and Hx is spanned by the 
orthonormal basis {|a;)x|a^ = 0, ... — 1}. The operator 
V has the following action 



M 



V\j)s\x)x = \j)sU,\x): 



(18) 



where the operator Uj, acting on Tix implements the 
permutation aj, i.e. Uj\x)x = \<^jix))x- What we see is 
that our processor is a controUed-U gate, with the unitary 
operators that it performs corresponding to the permu- 
tations in the set S. As we shall see shortly, besides a 
processor that implements V we shall also need one that 
implements V~^. 

We start the system in the state |^i„) = \w)s\xo)x, 
where 



M 



(19) 



We first apply V , and then apply the operator 

g = - V{I~2\w)s{w\®\xo)x{x^\)V~^ 
(/-2/s® lyo)x(yol), 



(20) 



a number of times n, where n is yet to be determined, to 
the initial state. At the end of the iteration procedure 
our state is Q"T^|5'iTi), and we then measure the state in 
the basis = l,...Af}. With a probability close 

to one we will obtain the j corresponding to the desired 
permutation. 

In order to see how this works, let us find the state after 
one iteration. We can assume, without loss of generatlity, 
that j — 1 corresponds to the desired permutation. We 
then have that 



1 



\xo)x. (21) 



We note that what has happened is that the probabil- 
ity of j = 1 has increased, and the probabilities of all 
of the other values of j has decreased. This is exactly 
what happens in the standard Grover algorithm. Further 
applications of Q will increase the probability of j = 1 
further, as long as we do not do it too many times. 

For a more detailed analysis, we note, again as with the 
standard Grover algorithm, that all of the action takes 
place in a two-dimensional subspace, and that Q is simply 
a rotation in that subspace. In particular, the subspace 
is the span of the two vectors \vi) = |l)s|yo)x and \v2) = 
V\^^n)- We find that 



Q\vi) 

Q\V2) 



1 



/M 



M 



V2 



M 



(22) 



The vectors \ vi) and 1112) are not orthogonal, so we define 
the vector 



M 



M -1 



1/2 



1 



'M 



(23) 



In terms of the basis {jwi), the action of Q is given 

by 



Q\vi) = (1-^ 



Q\vi) = 1- 



M 



Defining the angle a as 



sma 



1 



'M 



1 

M 



1 

M 



1 

M 



1/2 



1/2 



(24) 



\vi)- 



1/2 



we see that for any vector of the form 

= cos^lwi) + s\ne\vi), 

we have that 

(31-0) = cos(6' - a)\vi) + sin{e - a.)\vi) 



(25) 



(26) 



(27) 



The procedure we have outlined starts in the state |u2) , 
which is close to, but not quite, orthogonal to \vi). We 
want to rotate the state so that it becomes close to 
because it is the Tis part of \vi) that contains the infor- 
mation about which permutation has the desired prop- 
erty. This means that we want to iterate the process 
approximately n = 7r/(2a) ~ 7r-\/M/4 times. This is a 
considerable improvement over the roughly M steps we 
would have to perform classically. 
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We can also easily extend this algorithm to search for 
n-tuples that are automorphic images of each other as 
in the generalized Whithead problem. Let us consider 
the case n — 2. In particular, we now want to find the 
permutation, ctj such that aj{xQ) = yo and aj{xi) = yi. 
Our Hilbert space is now H = Hsi (X" 'Hs2 (X" Hxi 'Hx2, 
where Hsi and Tls2 are both copies of Tis, and Hxi and 
Hx2 are copies of Hx ■ The operator V (^V acts as 

[V ®V)\ji)si\j2)s2\x)xi\x')x2 

= \ji)si\j2)s2UjAx)xiUj,\x')x2. (28) 
Now define the state 

1 

\W)siS2^-7j^Y.\^)si\j)s2, (29) 

and the operators 

PxiX2 = |a;o)xi(a;o| ® |a;i)x2(a;i| 

Px!x2 - \yo)xi{yo\ ® \yi)x2{yi\. (30) 

For our initial state we now choose |5'm) — 
\W)siS2\xo)xi\xi)x2- We begin by applying V (g) V to 
this state, and then applying the operator 

Q - -{V(g>V)iI-2\W)sis2{W\(g>P^^%^) 

iV-' (g> V-'){I - 2/51S2 ® P^^lx2)^ (31) 



approximately tt^/M/A times. We then measure either 
the Hsi or Ti.s2 part of the state in the computational 
basis to determine the permutation. 

Note that in the algorithms being discussed in this sec- 
tion, the quantum search is being applied to the programs 
that implement the permutations. This would not be 
possible if those programs were classical. 

V. CONCLUSION 

We have presented three applications of efficient quan- 
tum algorithms to the study of group automorphisms. In 
addition to finding properties of automorphisms, two of 
them can be applied to find properties of permutations, 
i.e. finding fixed points and finding which permutation 
maps one particular set element onto another. 

This last task is accomplished by doing a Grover search 
on the programs of a programmable quantum processor. 
This shows that there are advantages to using quantum 
programs that are themselves quantum states. In partic- 
ular, one can apply quantum information processing to 
programs as well as data. We expect that further work 
in this direction could prove useful. 
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